ESP RACF Security Rules

[Denise Cronin]

Hi,

My company is primarily a dSeries CAWLA shop, but we do have one small data center running ESP (mSeries). I am an Admin for the CAWLA and have limited knowledge of ESP and have been asked to review how the security is set up for ESP and determine if there are any breaches. Unfortunately, the RACF support team supporting the Data Center doesn't have much knowledge on ESP, so I'm at a loss as to how to extract the security rules governing access to ESP.

 

I know there should be rules like ESP.APPLX.* or ESP.GROUPX.* set up, but I do not know how to retrieve the rules from the RACF environment.

 

Any help the Community can provide would be greatly appreciated.

 

Thanks,

Denise Cronin

[Lenn Thompson]

Denise, I've moved this question to the CA Mainframe Workload Automation community, where the ESP team will see it. 

[Denise Cronin]

Thanks, Lenn, I wasn’t sure where the ESP community was.

 

Denise

[Lenn Thompson]

You're welcome. That's why I'm here

And once we migrate to the new platform, ESP will have its own, standalone community which I hope will make it easier to find!

[Lucy Zhang]

Hi Denise,

 

To List the security profiles in RACF, RL command should be used. Following is from IBM website: 

https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.icha400/rlist.htm 

 

You can issue:

RL class_name *

 

Note: change class_name to the value on SAFCLASS parm in ESPPARM.

 

Hope this helps,

 

Lucy